Privacy Protection

The legal responsibility of this notice rests with Bucerius Kunst Forum gGmbh, D-20457 Hamburg, Alter Wall 12.

The Bucerius Kunst Forum attach great importance to the protection of your personal data. The data collected when you visit our website are stored and used in accordance with the General Data Protection Regulation (GDPR). We regard your personal data as strictly confidential. This data protection notice provides information on how the Bucerius Kunst Forum deals with the data and information that are collected when you visit the webpages of our organization.


1. Data Collection and Processing

Personal data are, according to Art. 4 GDPR, all information relating to an identifiable person, e.g. Name, postal and e-mail address or telephone number. This includes usage data such as IP addresses. The Bucerius Kunst Forum ensures that only relevant data is collected and stored. Whenever personal data such as your name and e-mail-address are collected on our webpages, this is subject to your consent, for example if you order further information or our newsletter according to the GDPR, Art. 6 para. 1 lit. b) and f). Your personal data are used exclusively for the intended purpose and within the scope required; under no circumstances are the data shared with third parties. IP addresses are held by the hosting service for three days. The hosting operator itself works with other providers to protect the websites from fraudulent activity. In doing so, he ensures compliance with legal requirements through data processing contracts and appropriate guarantees for data transfers to third countries.


2. Newsletter

If you wish to order our newsletter, we require your name and email address for mailing. Signing up for this is done through the double opt-in process. You will only receive the newsletter once you have confirmed your registration via the email and link sent by us. The date and IP address of the order are kept. Subscribers to the newsletter can unsubscribe at any time on our newsletter page, address and user data are then deleted. For changes to your email address, please use the contact form provided. The legal basis of this data processing is Art. 6 para. 1 lit. a) and b) GDPR.


3. Events

Our webpages also allow you to register for specific events. Beyond registering with your contact details, there may be an option to register for follow-up events. Some events require security measures that may entail the collection of additional personal data. In this case, you consent in accordance with Art. 6 para. 1 lit. f) and Art. 7, GDPR.


4. Cookies

Whenever you visit our web pages, data is automatically collected in the form of cookies. A cookie is a small data file that is saved by the web browser on your computer. It interacts with your web browser to enable the full functionality of the web pages. To do so, the cookie reads data regarding the device used, the operating system, the location, and the time spent browsing the pages in question.

Cookies are in general divided into the following types:

Temporary cookies, known as “session” or “transient” cookies, are deleted after the user exits a website and closes the browser. Such a cookie may be used for example to temporarily save the contents of a shopping cart in an online shop or a login status.

Cookies are described as “permanent” or “persistent” if they are stored even after the browser is closed. For example, the login status may be saved in case the user visits the website again after a few days. This type of cookie may also be used to store a user’s preferences in order to assess the reach of the website content or for marketing purposes.

Third-party cookies are cookies from providers other than the one responsible for the website in question (the cookies from the website provider are in turn called “first-party cookies”).

We only use cookies on our website that do not allow the user to be personally identified.

The following cookies are used on our web pages:

  • CookieConsent
    This first-party cookie is set by our website to indicate that the user has agreed to the use of cookies during their visit to the website. The cookie banner then no longer has to be displayed each time you visit the website. No personal user data is collected via this cookie. The cookie is stored for 3 months.
     
  • PHPESSID
    This first-party cookie optimises user guidance functions and is deleted after your visit. It refers to a unique session ID that is assigned for the current browser session. No personal data is stored. As soon as the user’s browser is closed, the session is terminated and the cookie deleted.

If you have agreed to the use of statistics cookies, the following cookies will also be set:  

  • _pk_*:
    This cookie is used for Matomo tracking, a web analytics service. For more information, see point 10 of this Privacy Protection notice.


5. Links to Websites of Other Providers

The web pages of the Bucerius Kunst Forum may contain links to other websites. No data are transmitted to "social media" companies. Unless the user follows a clearly marked link, there is no data transmission to the link in question. On our website, we embed videos on the YouTube platform. When you visit a page with the YouTube videos, it will connect to YouTube's servers. If a YouTube video is started, the provider uses cookies that collect information about user behavior. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally.

Our website uses Google Maps and Snazzy Maps as well as Google Fonts to illustrate our address. We cannot exclude that the data is transferred to Google Inc. or Snazzy Maps.

This data protection notice applies only to the website of the Bucerius Kunst Forum. We cannot influence or monitor whether other providers comply with data protection laws.


6. Online presence on social media platforms
We have an online presence on social networks and platforms such as Facebook and others. The "fan page" you visit gives you an opportunity to respond to our offerings and to comment on our content. During your interaction you may be transmitting some personal data that we will process on the basis of our legitimate interests for optimizing the information we provide and the way in which we communicate with our users in accordance with Art. 6 Abs. 1 lit. f) GDPR (General Data Protection Regulation). Please be advised that in doing so, we may also process the data of users from outside the European Union. This user data will generally be used for the purposes of market research and advertising. Any information requests or claims pertaining to user rights legislation are best directed to the providers. Solely the providers are able to access user data and are therefore able to provide information and take appropriate measures. In connection with any requests related to Facebook, we would like to point out that the primary responsibility for providing information in accordance with GDPR (General Data Protection Regulation) lies with Facebook. Facebook provides information on its data policy here. For further information about page insights data provided by Facebook, click here. In the event that you require further help, please don't hesitate to contact us.


7. Membership in the Bucerius Kunst Club

In order to be able to ensure the administration and support, we collect, process and use the following data of the members on the basis of Art. 6 (1) lit. b) and f) GDPR: name, first name, address, e-mail address, date of birth and in case of a debit mandate the bank details.


8. Security

In order to ensure the integrity and confidentiality of personal data, the Bucerius Kunst Forum undertakes all necessary technical and organizational security measures to prevent loss of data, its misuse or unlawful access. For this reason, the data are stored in a secure system environment. Please be advised that there is a risk of security breaches during data transmission by email via the Internet. We cannot guarantee complete protection against unauthorized outside access to computer material and data.


9. Data Subject Access Requests

Under the General Data Protection Regulation (GDPR) Art. 15 para. 1 you may ask to see the information about yourself that is held on computer, and may exercise the right for the data in question to be corrected, blocked or deleted. If you have any questions, please contact the data protection officer at schuster@remove-this.zeit-stiftung.de. You have the right to object to data processing and a right to data portability according to Art. 20, GDPR. We refer to a supervisory authority: Hamburg Commissioner for Data Protection and Freedom of Information, D-20459 Hamburg, Ludwig-Erhard-Straße 22.


10. Web Analysis Services

Our websites use Matomo. This is a tracking service that provides analysis of the use of our web pages. To this end, the information generated by the cookie _pk_* (including your abbreviated IP-address) is sent to our server and saved for analytical purposes, for example the duration and sequence of your search on our pages. This information enables us to measure user frequency and helps us improve the attractiveness and functionality of our web pages. Your IP-address is immediately anonymized as part of the process, which means that you as a user remain anonymous to us. The information on your use of our website that is generated by the cookie is not shared with any third party. You can disable the cookies through the appropriate setting of your browser software, but this may result in your being blocked from using some of the functions of our website. If you wish to prevent collection and analysis of these data during your visit to our website, you may opt out of the collection and use at any time simply by mouse click. In this case, a so-called opt-out cookie is created in your browser with the result that Matomo collects no session data. Please note that whenever you delete your cookies, the opt-out cookie is automatically also deleted and will have to be reactivated on your next visit.